We seem to have gotten an extension with a .php extension (via email, allowed extensions didn’t contain php). And while it doesn’t seem to execute it (thankfully), it returns a 404 instead of the file content. What would be the best solution for this?
Edit the post to not link to it and it’ll get deleted automatically.
Right… That doesn’t give me the emaled-in file though.
Oh. Since you had PHP files denied I assumed that you didn’t want it.
If you want to solve the problem once, you can
cd /var/discourse find shared -name "*php"
What happens if you allow uploaded PHP files? Without looking, I’m guessing that there’s something in the Nginx config that denies php files. You can look in the templates (in discourse_docker) for what that is.